Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/6delg1WheUTL6-U59iguZ_iM4jA.roa
File:                     6delg1WheUTL6-U59iguZ_iM4jA.roa (raw, json)
Hash identifier:          abwXS750UDC7RCPWmPZ1QSAo+nz6gI9ND8b9v+0Qj18=
Subject key identifier:   E9:D7:A5:83:55:A1:79:44:CB:EB:E5:39:F6:28:2E:67:F8:8C:E2:30
Certificate issuer:       /CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Certificate serial:       7A329A
Authority key identifier: 25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/6delg1WheUTL6-U59iguZ_iM4jA.roa
Signing time:             Sat 01 Jan 2022 03:52:08 +0000
ROA not before:           Sat 01 Jan 2022 03:52:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8008346 (0x7a329a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
        Validity
            Not Before: Jan  1 03:52:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9d7a58355a17944cbebe539f6282e67f88ce230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:51:09:9b:10:31:de:34:f4:a1:5f:bf:bc:
                    d1:19:4c:6b:b7:32:10:20:37:40:f0:91:f5:48:d1:
                    bd:d7:29:ad:70:c0:24:f1:07:49:90:46:f6:27:a8:
                    e6:2a:cb:e4:cc:e4:74:85:06:d9:0b:c5:89:f0:9f:
                    83:2f:b6:3a:24:a5:1a:f5:1a:a2:ba:3c:68:63:9b:
                    3a:f1:f9:d9:e7:e9:ba:25:84:d8:c9:c6:ed:48:e9:
                    77:23:b8:40:0b:49:11:68:39:e5:2f:45:5a:cd:a8:
                    c5:16:de:2a:a3:ca:8a:80:47:00:0d:db:29:46:1d:
                    85:7f:36:bc:4b:fc:60:49:be:dd:08:3a:f1:74:f5:
                    9d:d6:a7:8e:68:2d:7f:c8:e1:b9:50:45:e3:82:d8:
                    37:4f:e3:ae:29:0f:2f:09:0f:d0:ea:a9:83:37:e4:
                    c6:54:8d:2b:62:92:90:5f:e1:e2:1f:c9:bf:fb:8b:
                    6f:30:7c:e3:e8:de:65:13:70:77:a6:64:bf:30:df:
                    7c:53:3b:45:d4:72:3e:a1:09:13:c2:87:c6:48:c9:
                    08:8f:b2:19:cc:ee:e5:3e:ef:cc:f8:0b:1c:5b:3d:
                    b8:67:94:1c:12:50:eb:45:95:b1:cd:fd:02:02:e8:
                    fb:06:8d:36:21:88:d2:d5:7f:6a:23:f0:70:76:52:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:A5:83:55:A1:79:44:CB:EB:E5:39:F6:28:2E:67:F8:8C:E2:30
            X509v3 Authority Key Identifier:
                keyid:25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/6delg1WheUTL6-U59iguZ_iM4jA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:d7:0d:6d:f7:d4:53:1f:d3:2f:92:3a:74:f3:fb:59:ef:
         98:3b:5c:09:57:a8:ed:3c:49:6a:1b:19:d6:bc:05:3b:b4:d7:
         51:79:26:6d:22:69:b5:d6:de:8b:98:3a:3b:84:cf:e2:bd:36:
         55:46:1c:36:7f:94:1c:ef:08:ef:84:7b:12:2f:ea:ba:3f:a9:
         d5:c2:63:79:b8:f9:db:02:17:6e:9e:d0:60:65:1f:b0:f4:af:
         75:1e:6e:80:53:b6:23:01:a4:f1:21:b4:dd:43:bf:8a:3b:55:
         6c:49:4d:c5:e4:72:3f:72:d2:38:1e:f1:64:23:9c:12:9f:d7:
         62:50:2e:c0:5b:1e:17:2c:a7:0f:e1:aa:07:7a:d7:12:3d:1e:
         67:b2:41:de:99:7c:20:9b:d3:04:1f:4b:42:9c:04:02:66:49:
         38:3f:e2:d3:87:5c:c5:fd:b6:c1:b1:54:eb:ab:e0:6c:09:0d:
         fe:98:1a:f0:0e:c9:84:3f:a8:b2:69:01:64:bd:86:23:e5:b2:
         76:8a:0d:6f:74:28:bd:d7:a8:cb:b2:8b:a1:6c:9f:bb:22:05:
         9f:0a:05:78:7c:b7:d7:ad:0e:af:03:3e:f2:9a:30:cc:de:e7:
         1a:67:f2:22:ce:67:ee:95:9c:99:72:77:68:d3:d6:96:69:b8:
         81:bf:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:24 2023 by rpki-client on console-fra.rpki-client.org